CVE-2018-3703

HIGH

Intel Ssd Data Center Tool < 3.0.17 - Incorrect Permission Assignment

Title source: rule

Description

Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_confirm

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00207.html

Scores

CVSS v3 7.8

EPSS 0.0004

EPSS Percentile 11.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-732

Status published

Products (1)

intel/ssd_data_center_tool < 3.0.17

Published Jan 10, 2019

Tracked Since Feb 18, 2026